Ich habe Problem mit "how to decryt files", diese Thema habe ich ins Internet gelesen. Aber Forum ist schon abgelaufen und geschlossen ist.

Hi,

Ist Deutsch deine Muttersprache oder Englisch?

vielen Dank, bitte in deutsch.
Ich habe letzte Tage alle Datei mit " how to ..." von mein Pc ( Datei, Programme) entfernenoder löschen . Jetzt gibt es probleme, meine Bilder , Mp3 , ZIP, RAR Datei sind nicht mehr lesbar , bzw. nicht mehr funktioniert. Können Sie mir weiter helfen?
Gruß

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Welche Dateiendung haben die Dateien jetzt?

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-05-2015
Ran by HABIBI (administrator) on MAIAN on 31-05-2015 20:34:01
Running from C:\Users\HABIBI\Downloads\Programs
Loaded Profiles: HABIBI (Available Profiles: HABIBI)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcsrvx.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgui.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgidsagent.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgwdsvc.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgemcx.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(AVG Technologies) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(AVG Technologies) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3745232 2015-04-15] (AVG Technologies CZ, s.r.o.)
HKLM\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [4826904 2014-10-30] (Piriform Ltd)
HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3898960 2015-04-20] (Tonec Inc.)
HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\MountPoints2: {d9eb5174-6995-11e3-b436-00235aefe0b6} - E:\pushinst.exe
HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\eMachine.scr
IFEO\gameconsole-wt.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\windvd.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2014-04-21] (Tonec Inc.)
BootExecute: autocheck autochk * उ उउऀᄑ

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Google
HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\Software\Microsoft\Internet Explorer\Main,Start Page = Google
URLSearchHook: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000 - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACEW
SearchScopes: HKLM -> {8D7BCC95-4B3A-4597-B533-7B32EBE22488} URL = hxxp://www.searchcanvas.com/web?ot=3&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACEW
SearchScopes: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000 -> {8D7BCC95-4B3A-4597-B533-7B32EBE22488} URL =
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files\Internet Download Manager\IDMIECC.dll [2015-02-21] (Internet Download Manager, Tonec Inc.)
BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19] (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab
DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} Microsoft Office Download - Microsoft Store Deutschland
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\HABIBI\AppData\Roaming\Mozilla\Firefox\Profiles\d5msgkdb.default-1411322583490
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-23] ()
FF Plugin: @java.com/DTPlugin,version=1.6.0_35 -> C:\Windows\system32\npdeployJava1.dll [2012-08-28] (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files\Microsoft\Office Live\npOLW.dll No File
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin: @real.com/nprphtml5videoshim;version=1.0.0.0 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2010-04-02] (RealNetworks, Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-04-05] ()
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2368753947-3574136048-3515473578-1000: ubisoft.com/uplaypc -> C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\HABIBI\AppData\Roaming\Mozilla\Firefox\Profiles\d5msgkdb.default-1411322583490\searchplugins\google-images.xml [2014-09-28]
FF SearchPlugin: C:\Users\HABIBI\AppData\Roaming\Mozilla\Firefox\Profiles\d5msgkdb.default-1411322583490\searchplugins\google-maps.xml [2014-09-28]
FF SearchPlugin: C:\Users\HABIBI\AppData\Roaming\Mozilla\Firefox\Profiles\d5msgkdb.default-1411322583490\searchplugins\HOW TO DECRYPT FILES.txt [2011-02-25]
FF Extension: Adblock Plus - C:\Users\HABIBI\AppData\Roaming\Mozilla\Firefox\Profiles\d5msgkdb.default-1411322583490\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-13]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-12-02]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010-04-02]
FF HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\HABIBI\AppData\Roaming\Mozilla\Firefox\Profiles\d5msgkdb.default-1411322583490\extensions\cliqz@cliqz.com
FF HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\HABIBI\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\HABIBI\AppData\Roaming\IDM\idmmzcc5 [2015-05-31]
FF HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\HABIBI\AppData\Roaming\IDM\idmmzcc5

Chrome:
=======
CHR Profile: C:\Users\HABIBI\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs) - C:\Users\HABIBI\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-27]
CHR Extension: (Google Drive) - C:\Users\HABIBI\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-27]
CHR Extension: (YouTube) - C:\Users\HABIBI\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-03-30]
CHR Extension: (IDM Integration Module) - C:\Users\HABIBI\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn [2014-04-27]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\HABIBI\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2012-03-30]
CHR Extension: (Google Wallet) - C:\Users\HABIBI\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-27]
CHR Extension: (Gmail) - C:\Users\HABIBI\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-27]
CHR HKLM\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2010-04-02]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2015-04-20]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgfws; C:\Program Files\AVG\AVG2015\avgfws.exe [1517480 2015-04-15] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3438032 2015-04-15] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [311792 2015-04-15] (AVG Technologies CZ, s.r.o.)
R2 ePowerSvc; C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe [653856 2009-02-06] (Acer Incorporated)
S4 IconMan_R; C:\Program Files\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [1828496 2012-09-07] (Realsil Microelectronics Inc.)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [2161976 2015-02-25] (AVG Technologies)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswKbd; C:\Windows\system32\Drivers\aswKbd.sys [24408 2012-03-07] (AVAST Software)
R3 athr; C:\Windows\System32\DRIVERS\athr.sys [3078656 2012-11-08] (Qualcomm Atheros Communications, Inc.)
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [132576 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6x.sys [57824 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [226784 2015-04-09] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [166880 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [29664 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [206816 2015-04-15] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [269792 2015-03-11] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [110048 2015-04-03] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [35808 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [213984 2015-04-07] (AVG Technologies CZ, s.r.o.)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2007-01-26] (AVM Berlin) [File not signed]
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-03-31] () [File not signed]
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [265088 2007-01-26] (AVM GmbH)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x86.sys [99992 2012-07-19] (Qualcomm Atheros Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2015-05-31] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [15688 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [10320 2013-09-30] ()
R3 TuneUpUtilitiesDrv; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [12320 2015-01-13] (TuneUp Software)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-31 20:24 - 2015-05-31 20:21 - 00001313 _____ () C:\Users\HABIBI\Documents\Addition - Verknüpfung.lnk
2015-05-31 20:16 - 2015-05-31 20:01 - 00045135 _____ () C:\Users\HABIBI\Documents\FRST.txt
2015-05-31 20:06 - 2015-05-31 20:06 - 00119200 _____ () C:\Users\HABIBI\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-31 19:31 - 2015-05-31 19:33 - 00007079 _____ () C:\Windows\WindowsUpdate.log
2015-05-27 21:59 - 2015-05-27 21:59 - 00000017 _____ () C:\Users\HABIBI\AppData\Local\resmon.resmoncfg
2015-05-20 18:42 - 2015-05-20 18:42 - 00000000 ____D () C:\Users\HABIBI\Documents\Praetorians
2015-05-20 18:38 - 2015-05-20 18:38 - 00001120 _____ () C:\Users\Public\Desktop\Praetorians.lnk
2015-05-20 18:38 - 2015-05-20 18:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eidos Interactive
2015-05-20 18:36 - 2015-05-20 18:36 - 00000000 ____D () C:\Program Files\Eidos Interactive
2015-05-19 19:37 - 2015-05-27 21:34 - 00000000 ____D () C:\Program Files\Internet Download Manager
2015-05-19 19:37 - 2015-05-19 19:37 - 00001001 _____ () C:\Users\HABIBI\Desktop\Internet Download Manager.lnk
2015-05-19 19:37 - 2015-05-19 19:37 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2015-05-19 19:37 - 2015-05-19 19:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2015-05-19 18:34 - 2015-05-31 19:54 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\IDM
2015-05-14 13:31 - 2015-05-31 19:30 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-14 13:30 - 2015-05-14 13:30 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-05-14 13:30 - 2015-05-14 13:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-05-14 13:30 - 2015-05-14 13:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-14 13:30 - 2015-05-14 13:30 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2015-05-14 13:30 - 2015-04-14 09:37 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-05-14 13:30 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-05-14 13:30 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-05-14 13:01 - 2015-01-14 11:27 - 02894848 _____ () C:\Windows\system32\pwNative.exe
2015-05-14 13:01 - 2013-09-30 16:26 - 00015688 ____N () C:\Windows\system32\pwdrvio.sys
2015-05-14 13:00 - 2015-05-14 13:43 - 00000000 ____D () C:\Program Files\MiniTool Partition Wizard Free 9.0
2015-05-14 13:00 - 2013-09-30 16:26 - 00010320 ____N () C:\Windows\system32\pwdspio.sys
2015-05-14 11:24 - 2015-05-14 11:24 - 00000000 ____D () C:\Neuer Ordner
2015-05-12 22:17 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-12 19:49 - 2015-04-27 21:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-05-12 19:49 - 2015-04-27 21:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-12 19:49 - 2015-04-27 21:11 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-12 19:49 - 2015-04-27 21:11 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-12 19:49 - 2015-04-27 21:08 - 01307648 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00851456 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-12 19:49 - 2015-04-27 21:04 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-12 19:49 - 2015-04-27 21:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-05-12 19:49 - 2015-04-27 21:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-12 19:49 - 2015-04-27 21:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-05-12 19:49 - 2015-04-27 21:04 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-05-12 19:49 - 2015-04-27 21:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-05-12 19:49 - 2015-04-27 21:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-05-12 19:49 - 2015-04-27 21:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-05-12 19:49 - 2015-04-27 21:04 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-05-12 19:49 - 2015-04-27 21:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-05-12 19:49 - 2015-04-27 21:04 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-12 19:49 - 2015-04-27 21:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-12 19:49 - 2015-04-27 21:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-12 19:49 - 2015-04-27 21:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-05-12 19:49 - 2015-04-27 21:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-12 19:49 - 2015-04-27 21:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-12 19:49 - 2015-04-27 20:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-12 19:49 - 2015-04-27 20:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-05-12 19:49 - 2015-04-27 20:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-12 19:49 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-12 19:49 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-12 19:49 - 2015-04-21 18:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-12 19:49 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-12 19:49 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-12 19:49 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-12 19:49 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-12 19:49 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-12 19:49 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-12 19:49 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-12 19:49 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-12 19:49 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-12 19:49 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-12 19:49 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-12 19:49 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-12 19:49 - 2015-04-21 17:58 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-12 19:49 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-12 19:49 - 2015-04-21 17:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-12 19:49 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-12 19:49 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-12 19:49 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-12 19:49 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-12 19:49 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-12 19:49 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-12 19:49 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-12 19:49 - 2015-04-21 17:26 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-12 19:49 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-12 19:49 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-12 19:49 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-12 19:49 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-12 19:49 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-12 19:49 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-12 19:49 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-12 19:48 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-12 19:48 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-12 19:48 - 2015-04-20 04:56 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-12 19:48 - 2015-04-20 04:03 - 02382336 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-12 19:48 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-12 19:48 - 2015-04-13 05:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-12 19:44 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-12 19:44 - 2015-04-08 05:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-12 19:44 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-05-12 19:44 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-12 19:44 - 2015-03-04 06:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-12 19:44 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-12 19:44 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-10 15:26 - 2015-05-10 15:26 - 00000000 ____D () C:\ProgramData\Baidu
2015-05-10 15:26 - 2015-05-10 15:26 - 00000000 ____D () C:\FFOutput
2015-05-10 14:51 - 2015-05-10 14:51 - 00000000 _____ () C:\vcredist.bmp
2015-05-03 21:14 - 1998-06-18 00:00 - 00089360 _____ (Microsoft Corporation) C:\Windows\system32\VB5DB.DLL
2015-05-03 18:09 - 2015-05-31 13:04 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\IrfanView
2015-05-01 13:49 - 2015-05-13 20:01 - 00002471 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-05-01 13:29 - 2015-05-01 13:29 - 00000000 ____D () C:\Program Files\MSECache
2015-05-01 11:33 - 2015-05-01 11:33 - 00000000 ____D () C:\Users\HABIBI\Documents\Fax
2015-05-01 11:29 - 2015-05-02 17:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015
2015-05-01 11:29 - 2015-05-01 11:29 - 00002181 _____ () C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2015-05-01 11:29 - 2015-05-01 11:29 - 00002171 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk
2015-05-01 11:29 - 2015-05-01 11:29 - 00002159 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2015.lnk
2015-05-01 11:29 - 2015-02-25 09:25 - 00037176 _____ (AVG Technologies) C:\Windows\system32\TURegOpt.exe
2015-05-01 11:29 - 2015-02-25 09:24 - 00025912 _____ (AVG Technologies) C:\Windows\system32\authuitu.dll
2015-05-01 10:17 - 2015-05-02 17:53 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Steganos VPN
2015-05-01 10:17 - 2015-05-01 10:26 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Steganos
2015-05-01 10:17 - 2015-05-01 10:26 - 00000000 ____D () C:\Program Files\Common Files\Steganos
2015-05-01 03:31 - 2015-05-02 17:54 - 00000000 ____D () C:\Program Files\MictorFents
2015-05-01 01:57 - 2015-05-01 01:57 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Opera Software
2015-05-01 01:57 - 2015-05-01 01:57 - 00000000 ____D () C:\Users\HABIBI\AppData\Local\Opera Software
2015-05-01 00:57 - 2015-05-01 00:57 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-31 20:34 - 2014-09-21 13:33 - 00000000 ____D () C:\FRST
2015-05-31 20:30 - 2014-02-13 21:02 - 00000000 ____D () C:\ProgramData\MFAData
2015-05-31 19:37 - 2012-05-04 22:08 - 00010512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-31 19:37 - 2012-05-04 22:08 - 00010512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-31 19:28 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-31 15:32 - 2012-08-28 21:56 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\DMCache
2015-05-27 21:54 - 2015-03-05 20:08 - 00000000 ____D () C:\Windows\tracing
2015-05-27 21:51 - 2013-07-18 20:36 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\vlc
2015-05-27 21:47 - 2011-02-28 20:05 - 00000000 ____D () C:\Program Files\Verbindungsassistent
2015-05-27 21:41 - 2009-12-18 16:06 - 00000000 ____D () C:\Program Files\Microsoft CAPICOM 2.1.0.2
2015-05-27 21:27 - 2009-12-30 14:13 - 00000000 ____D () C:\Program Files\Adobe
2015-05-23 18:36 - 2012-06-09 17:29 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-23 12:33 - 2014-06-22 21:06 - 00000000 ____D () C:\Users\HABIBI\AppData\Local\Adobe
2015-05-23 12:33 - 2012-06-09 17:29 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-05-23 12:33 - 2012-03-18 17:22 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-05-20 20:00 - 2015-04-04 12:19 - 00000000 ___SD () C:\Windows\system32\GWX
2015-05-20 19:50 - 2012-08-28 21:56 - 00000000 ____D () C:\Users\HABIBI\Downloads\Compressed
2015-05-20 18:42 - 2013-02-15 20:50 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-05-20 18:40 - 2009-03-03 15:40 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-05-17 08:40 - 2010-06-09 22:15 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-05-15 08:40 - 2015-03-16 20:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-05-15 08:26 - 2015-03-16 20:58 - 00000953 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2015-05-15 08:23 - 2014-11-19 16:22 - 00000000 ____D () C:\Users\HABIBI\AppData\Local\Avg
2015-05-14 19:43 - 2012-05-04 22:10 - 00000000 ____D () C:\Users\HABIBI
2015-05-14 19:37 - 2012-05-04 23:32 - 01647544 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-14 14:14 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-05-13 22:15 - 2009-07-14 10:56 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-13 19:42 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-05-13 19:42 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-13 19:40 - 2009-11-30 22:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-05-12 22:16 - 2013-08-20 11:27 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-12 22:06 - 2012-05-05 12:01 - 137310008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-12 22:01 - 2010-06-04 11:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-09 17:11 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2015-05-07 17:26 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2015-05-04 21:24 - 2014-09-22 17:52 - 00000000 ____D () C:\AdwCleaner
2015-05-03 12:26 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-05-03 12:26 - 2009-03-03 15:45 - 00000000 ____D () C:\Program Files\Microsoft.NET
2015-05-03 12:26 - 2009-03-03 15:44 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-05-03 12:24 - 2009-07-14 10:57 - 00000000 ____D () C:\Windows\ShellNew
2015-05-03 12:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\System
2015-05-03 12:21 - 2006-11-02 12:23 - 00000401 _____ () C:\Windows\win.ini
2015-05-03 12:18 - 2015-04-30 23:02 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-05-03 11:00 - 2009-12-04 22:24 - 00000000 ____D () C:\Program Files\AVG
2015-05-02 18:11 - 2010-01-02 00:33 - 00000000 ____D () C:\Program Files\DivX
2015-05-02 17:53 - 2009-07-14 10:56 - 00000000 ___RD () C:\Users\Public\Recorded TV
2015-05-02 17:53 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat
2015-05-01 23:04 - 2009-03-03 16:11 - 00000000 ____D () C:\Program Files\eMachines Games
2015-05-01 22:40 - 2009-03-03 15:13 - 00000000 ____D () C:\Program Files\MSXML 4.0
2015-05-01 21:48 - 2009-12-04 23:06 - 00000000 ____D () C:\Program Files\OpenOffice.org 3
2015-05-01 21:39 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\DVD Maker
2015-05-01 20:15 - 2009-03-03 16:07 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2015-05-01 20:13 - 2010-06-06 21:16 - 00000000 ____D () C:\Program Files\Common Files\PX Storage Engine
2015-05-01 20:13 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\Services
2015-05-01 20:08 - 2014-11-22 22:16 - 00000000 ____D () C:\Program Files\CCleaner
2015-05-01 20:08 - 2013-12-20 18:57 - 00000000 ____D () C:\Program Files\avmwlanstick
2015-05-01 19:47 - 2009-07-19 03:37 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-05-01 19:46 - 2012-04-07 16:41 - 00000000 ____D () C:\Program Files\Atheros
2015-05-01 19:25 - 2009-03-03 16:22 - 00000000 ____D () C:\book
2015-05-01 19:19 - 2009-03-03 15:46 - 00000000 ____D () C:\Program Files\Microsoft Works
2015-05-01 18:31 - 2013-12-29 23:24 - 00000000 ____D () C:\Program Files\Winamp
2015-05-01 18:30 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\Windows Defender
2015-05-01 18:29 - 2010-04-30 23:13 - 00000000 ____D () C:\Program Files\Windows Live Safety Center
2015-05-01 18:27 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2015-05-01 18:27 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2015-05-01 18:06 - 2009-12-21 20:54 - 00000000 ____D () C:\Program Files\WinRAR
2015-05-01 18:06 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\Windows Sidebar
2015-05-01 18:01 - 2012-05-03 21:30 - 00000000 ____D () C:\Program Files\WinZip
2015-05-01 16:36 - 2009-07-14 04:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-01 16:34 - 2012-05-15 11:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-05-01 16:34 - 2012-05-04 22:10 - 00000000 ___RD () C:\Users\HABIBI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-05-01 16:34 - 2012-05-04 22:10 - 00000000 ___RD () C:\Users\HABIBI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-01 16:34 - 2009-07-14 04:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-05-01 16:32 - 2012-05-01 20:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
2015-05-01 16:32 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-05-01 16:29 - 2014-11-22 21:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-05-01 16:28 - 2013-12-20 18:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN
2015-05-01 16:28 - 2009-03-03 16:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eMachines Games
2015-05-01 16:27 - 2012-05-03 21:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2015-05-01 16:27 - 2012-04-11 11:34 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3
2015-05-01 16:27 - 2009-07-19 03:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InterVideo WinDVD
2015-05-01 16:26 - 2012-05-15 11:20 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-05-01 16:26 - 2010-02-13 23:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TightVNC
2015-05-01 13:52 - 2009-11-30 13:34 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Adobe
2015-05-01 13:41 - 2012-08-28 21:56 - 00000000 ___RD () C:\Users\HABIBI\Downloads\Video
2015-05-01 11:29 - 2009-07-19 03:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eMachines
2015-05-01 10:57 - 2014-05-10 10:26 - 00000000 ____D () C:\Users\HABIBI\Documents\Neuer Ordner
2015-05-01 10:26 - 2014-04-27 19:26 - 00000000 __SHD () C:\Users\HABIBI\AppData\Local\EmieUserList
2015-05-01 10:20 - 2015-03-16 20:57 - 00000000 ____D () C:\ProgramData\AVG2015
2015-05-01 04:05 - 2013-12-29 23:24 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Winamp
2015-05-01 04:05 - 2013-02-15 20:25 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Origin
2015-05-01 04:05 - 2011-12-06 21:22 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Tunngle
2015-05-01 04:05 - 2011-06-05 00:47 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Template
2015-05-01 04:05 - 2010-09-09 22:28 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\ProtectDisc
2015-05-01 04:05 - 2010-07-10 21:00 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\skypePM
2015-05-01 04:05 - 2010-07-10 20:52 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Skype
2015-05-01 04:05 - 2010-03-06 00:58 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\TeamViewer
2015-05-01 04:05 - 2009-12-21 20:56 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\WinRAR
2015-05-01 04:04 - 2014-04-25 20:21 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\DiskDefrag
2015-05-01 04:04 - 2013-12-29 23:16 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\foobar2000
2015-05-01 04:04 - 2012-05-03 21:31 - 00000000 ____D () C:\Users\HABIBI\AppData\Local\WinZip
2015-05-01 04:04 - 2012-05-03 21:30 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Azureus
2015-05-01 04:04 - 2010-12-19 11:34 - 00000000 ____D () C:\Users\HABIBI\AppData\Local\PokerStars
2015-05-01 04:04 - 2010-12-13 20:35 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Boomzap
2015-05-01 04:04 - 2010-09-03 22:48 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\ICQ
2015-05-01 04:04 - 2010-07-23 17:26 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\dvdcss
2015-05-01 04:03 - 2015-01-02 12:08 - 00000000 __SHD () C:\Users\HABIBI\AppData\Local\EmieBrowserModeList
2015-05-01 04:03 - 2014-04-27 19:26 - 00000000 __SHD () C:\Users\HABIBI\AppData\Local\EmieSiteList
2015-05-01 04:03 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2015-05-01 04:03 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-05-01 04:03 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-01 04:03 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-05-01 04:03 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-01 04:02 - 2012-05-03 21:30 - 00000000 ____D () C:\ProgramData\WinZip
2015-05-01 04:02 - 2012-04-21 17:27 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-05-01 04:02 - 2010-09-17 19:18 - 00000000 ____D () C:\ProgramData\UDL
2015-05-01 04:02 - 2009-03-03 16:11 - 00000000 ____D () C:\ProgramData\WildTangent
2015-05-01 04:00 - 2014-12-05 19:45 - 00000000 ____D () C:\ProgramData\formatpart
2015-05-01 04:00 - 2014-12-05 19:42 - 00000000 ____D () C:\ProgramData\deletepart
2015-05-01 04:00 - 2014-12-05 19:40 - 00000000 ____D () C:\ProgramData\createonepart
2015-05-01 04:00 - 2014-12-05 19:38 - 00000000 ____D () C:\ProgramData\redistpart
2015-05-01 04:00 - 2014-12-05 19:38 - 00000000 ____D () C:\ProgramData\launcher
2015-05-01 04:00 - 2014-12-05 19:38 - 00000000 ____D () C:\ProgramData\explauncher
2015-05-01 04:00 - 2014-02-16 22:05 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2015-05-01 04:00 - 2013-04-08 22:28 - 00000000 ____D () C:\ProgramData\Qualcomm Atheros
2015-05-01 04:00 - 2012-04-07 16:41 - 00000000 ____D () C:\ProgramData\Atheros
2015-05-01 04:00 - 2011-02-15 22:40 - 00000000 ____D () C:\ProgramData\Novatel Wireless
2015-05-01 04:00 - 2010-02-12 17:15 - 00000000 ____D () C:\ProgramData\PopCap Games
2015-05-01 04:00 - 2009-03-03 16:08 - 00000000 ____D () C:\ProgramData\Norton
2015-05-01 03:59 - 2010-02-13 23:51 - 00000000 ____D () C:\Program Files\TightVNC
2015-05-01 03:44 - 2009-03-03 22:43 - 00000000 ___HD () C:\ACER
2015-05-01 01:02 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\MSBuild

==================== Files in the root of some directories =======

2012-05-14 19:53 - 2013-07-18 19:36 - 0000000 _____ () C:\Users\HABIBI\AppData\Roaming\AVSDVDPlayer.m3u
2012-05-05 00:13 - 2011-02-25 07:30 - 0000435 _____ () C:\Users\HABIBI\AppData\Roaming\HOW TO DECRYPT FILES.txt
2013-02-14 20:41 - 2013-02-14 20:41 - 0022328 _____ () C:\Users\HABIBI\AppData\Roaming\PnkBstrK.sys
2009-11-30 14:03 - 2011-10-18 21:11 - 0001206 _____ () C:\Users\HABIBI\AppData\Roaming\wklnhst.dat
2012-05-05 00:13 - 2011-02-25 07:30 - 0000435 _____ () C:\Users\HABIBI\AppData\Local\HOW TO DECRYPT FILES.txt
2015-05-27 21:59 - 2015-05-27 21:59 - 0000017 _____ () C:\Users\HABIBI\AppData\Local\resmon.resmoncfg

Some files in TEMP:
====================
C:\Users\HABIBI\AppData\Local\Temp\iv_uninstall.exe
C:\Users\ordner\AppData\Local\Temp\RtkBtMnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-29 19:49

==Additional scan result of Farbar Recovery Scan Tool (x86) Version: 29-05-2015
Ran by HABIBI at 2015-05-31 19:58:37
Running from C:\Users\HABIBI\Downloads\Programs
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2368753947-3574136048-3515473578-500 - Administrator - Disabled)
Gast (S-1-5-21-2368753947-3574136048-3515473578-501 - Limited - Disabled)
HABIBI (S-1-5-21-2368753947-3574136048-3515473578-1000 - Administrator - Enabled) => C:\Users\HABIBI
HomeGroupUser$ (S-1-5-21-2368753947-3574136048-3515473578-1003 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG Internet Security 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
FW: AVG Internet Security 2015 (Enabled) {757AB44A-78C2-7D1A-E37F-CA42A037B368}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.)
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5941 - AVG Technologies)
AVG 2015 (Version: 15.0.4354 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.5941 - AVG Technologies) Hidden
AVG PC TuneUp 2015 (de-DE) (Version: 15.0.1001.403 - AVG Technologies) Hidden
AVG PC TuneUp 2015 (HKLM\...\AVG PC TuneUp) (Version: 15.0.1001.403 - AVG Technologies)
AVG PC TuneUp 2015 (Version: 15.0.1001.403 - AVG Technologies) Hidden
ccc-core-static (Version: 2010.0210.2339.42455 - Ihr Firmenname) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)
Cisco EAP-FAST Module (HKLM\...\{415B2719-AD3A-4944-B404-C472DB6085B3}) (Version: 2.1.6 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{83770D14-21B9-44B3-8689-F7B523F94560}) (Version: 1.0.12 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}) (Version: 1.0.13 - Cisco Systems, Inc.)
eMachines Games (HKLM\...\WildTangent emachines Master Uninstall) (Version: 1.0.0.52 - WildTangent)
eMachines Power Management (HKLM\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 4.00.3004 - eMachines)
eMachines Recovery Management (HKLM\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.00.3001 - Acer Incorporated)
eMachines ScreenSaver (HKLM\...\eMachines Screensaver) (Version: 1.0.1.0309 - eMachines)
Internet Download Manager (HKLM\...\Internet Download Manager) (Version: - Tonec Inc.)
InterVideo WinDVD 8 (HKLM\...\InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}) (Version: 8.0-B9.574 - InterVideo Inc.)
InterVideo WinDVD 8 (Version: 8.0-B9.574 - InterVideo Inc.) Hidden
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 38.0.1 (x86 de) (HKLM\...\Mozilla Firefox 38.0.1 (x86 de)) (Version: 38.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
OpenOffice.org 3.3 (HKLM\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Praetorians (HKLM\...\{AAC8AF92-DAEC-45D2-B77D-36699E3751A9}) (Version: - Pyro Studios)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.31 - Qualcomm Atheros)
Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.2.8400.30143 - Realtek Semiconductor Corp.)
Skins (Version: 2010.0210.2339.42455 - ATI) Hidden
Stronghold Crusader (HKLM\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version: - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 12.1.3.1 - Synaptics)
TightVNC 1.3.10 (HKLM\...\TightVNC_is1) (Version: 1.3.10 - TightVNC Group)
Ulead COOL 360 1.0 (HKLM\...\{3CEA4CA8-CDD4-451C-B673-E8F17BE01B15}) (Version: - )
Update Installer for WildTangent Games App (Version: - WildTangent) Hidden
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WildTangent Games App (eMachines Games) (HKLM\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-emachines) (Version: 4.0.5.37 - WildTangent)
Winamp (HKLM\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
Windows Live ID-Anmelde-Assistent (HKLM\...\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
WinRAR 5.10 Beta 4 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)
WinZip 16.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240CC}) (Version: 16.0.9715 - WinZip Computing, S.L. )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

12-05-2015 20:48:59 Windows Update
13-05-2015 22:14:48 Windows Update
14-05-2015 13:09:17 Windows-Sicherung
14-05-2015 13:44:51 Removed SDFormatter.
14-05-2015 13:46:42 Removed Visual Studio 2012 x86 Redistributables
14-05-2015 20:24:26 Windows-Sicherung
15-05-2015 08:15:45 Removed AVG 2015
19-05-2015 17:16:55 Windows-Sicherung
20-05-2015 18:36:03 Installiert Praetorians
20-05-2015 19:59:35 Windows Update
25-05-2015 10:46:50 Windows-Sicherung
30-05-2015 13:35:03 Uniblue PC Mechanic installation
31-05-2015 19:39:44 Windows-Sicherung

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {09382A03-9C92-402C-9DB0-CE1AEE0B7FEF} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {22844EAF-A051-44F3-92E4-97ED15A7A004} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-30] (Piriform Ltd)
Task: {2F75E6A9-D7AB-4E62-B025-9A3EB6466E3F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {4AA38D3E-93FB-4FFC-9BCF-89B994DC9C01} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {57E1D365-7AE6-4C6D-9CFE-2EF5BA425DCE} - System32\Tasks\{F3F083DA-5DDA-4C6D-803F-A1F3788BA372} => C:\Program Files\Internet Download Manager\IDMan.exe [2015-04-20] (Tonec Inc.)
Task: {5916F864-469C-4391-8604-E4EA141A2699} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {5B793A6F-49A8-483C-9B8C-82F2464731AE} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\AVG\AVG PC TuneUp\OneClick.exe [2015-02-25] (AVG Technologies)
Task: {732682C4-705A-413D-AC5F-D83E834554A9} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {9E2761F7-0D85-4866-9214-F6D6E9704483} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {ACDD310F-57C1-44F1-B3DF-C2EB93C99D99} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {C0507C45-2262-4CC1-AFE0-1EA458E1AB74} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {C71FCE0D-6D61-489C-B4E1-988EA6CB743D} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {DEB1DC8D-34EA-4A06-938C-179CD9B23AE8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-23] (Adobe Systems Incorporated)
Task: {F8F6D9D1-FA43-4D23-9A2F-0271F8A0D506} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (Whitelisted) ==============

2014-10-23 21:19 - 2014-10-23 21:19 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2014-04-14 21:41 - 2014-04-14 21:41 - 00039192 _____ () C:\Program Files\CCleaner\branding.dll
2015-02-25 09:25 - 2015-02-25 09:25 - 00604984 _____ () C:\Program Files\AVG\AVG PC TuneUp\avgreplibx.dll
2015-02-25 09:25 - 2015-02-25 09:25 - 00728888 _____ () C:\Program Files\AVG\AVG PC TuneUp\tulngx.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\57616772.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\65156158.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\57616772.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\65156158.sys => ""="Driver"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\00hq.com -> 00hq.com*-*Diese Website steht zum Verkauf!*-*Informationen zum Thema 00hq.
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\0scan.com -> 0scan.com*-*Diese Website steht zum Verkauf!*-*Informationen zum Thema 0scan.
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\1000gratisproben.com -> 1000gratisproben.com*-*Diese Website steht zum Verkauf!*-*Informationen zum Thema 1000gratisproben.
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\1001namen.com -> 404 Not Found
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\100sexlinks.com -> 100sexlinks.com*-*Diese Website steht zum Verkauf!*-*Informationen zum Thema Sex links.
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\10sek.com -> Gadgets And More
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\123moviedownload.com -> Watch Movies Online | uMovies Movie2k Online - 123Movies
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\123simsen.com -> 123Simsen-Projekte

There are 7748 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\HABIBI\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: FlashPlayerUpdate => C:\Windows\system32\Macromed\Flash\FlashUtil32_16_0_0_305_Plugin.exe -update plugin

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{4AC42962-B882-4EC7-824B-779089E20A35}C:\program files\tightvnc\winvnc.exe] => (Block) C:\program files\tightvnc\winvnc.exe
FirewallRules: [TCP Query User{3C3133ED-0E6C-468E-9088-31BD48F9BB87}C:\program files\tightvnc\winvnc.exe] => (Block) C:\program files\tightvnc\winvnc.exe
FirewallRules: [UDP Query User{2A7A1930-490F-4F05-BAAD-C322463AE70A}C:\windows\system32\taskeng.exe] => (Block) C:\windows\system32\taskeng.exe
FirewallRules: [TCP Query User{E7F822D6-BDBC-455D-90A9-7828F4AC2C72}C:\windows\system32\taskeng.exe] => (Block) C:\windows\system32\taskeng.exe
FirewallRules: [UDP Query User{CB234158-DA69-4101-80F0-D53F8235DCBE}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [TCP Query User{AA206CF9-C1F0-41EE-AC4A-F999BD2A1AEB}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [UDP Query User{8B4A5A76-0989-4350-A1F3-D5A52D6964AA}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [TCP Query User{C5B08CD0-3CB2-4CCF-868A-7D392270D42E}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [UDP Query User{1C4100E8-8E39-4A72-879D-1817C0ECD1B1}C:\windows\system32\taskeng.exe] => (Block) C:\windows\system32\taskeng.exe
FirewallRules: [TCP Query User{9E006149-7592-4F1A-9E2C-2D69E0B1027D}C:\windows\system32\taskeng.exe] => (Block) C:\windows\system32\taskeng.exe
FirewallRules: [{2BC81A8F-FEC0-48B2-B7D0-49A8159E9A36}] => (Allow) LPort=26675
FirewallRules: [{82489DB8-138B-4D32-B7B1-02CB69662787}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [UDP Query User{AA7E2804-1FC0-41C0-A46F-B3C0A1EED149}C:\program files\internet explorer\iexplore.exe] => (Allow) C:\program files\internet explorer\iexplore.exe
FirewallRules: [TCP Query User{E0292C85-3F2A-417C-BDBB-77FBCECF0F4F}C:\program files\internet explorer\iexplore.exe] => (Allow) C:\program files\internet explorer\iexplore.exe
FirewallRules: [UDP Query User{74C2536E-C092-45B0-BFC8-DF74A8C1599B}C:\program files\tightvnc\winvnc.exe] => (Allow) C:\program files\tightvnc\winvnc.exe
FirewallRules: [TCP Query User{B91D8808-F2B3-4813-937D-BDC0210DA49B}C:\program files\tightvnc\winvnc.exe] => (Allow) C:\program files\tightvnc\winvnc.exe
FirewallRules: [{00910517-1F44-49C1-9BE9-1086875D90FE}] => (Allow) C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{F1FD9A2D-F43B-4A2D-AEAC-D701DAD93572}] => (Allow) C:\Program Files\Winamp\winamp.exe
FirewallRules: [{247258D3-3E34-4815-A4EB-FF9567A5D46E}] => (Allow) C:\Program Files\Winamp\winamp.exe
FirewallRules: [{5445E45E-31FA-4EF1-9209-19322CB9CE68}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{1BC520C0-F027-42E6-977F-9B44839BFD32}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{1B0F5DDF-5F68-4BC0-8DC4-749AFDAF8572}] => (Allow) C:\Program Files\AVG\AVG2015\avgnsx.exe
FirewallRules: [{0896AA92-7C7E-4F43-9BCC-76E3C184AC3C}] => (Allow) C:\Program Files\AVG\AVG2015\avgnsx.exe
FirewallRules: [{D58A2297-B6FF-4FF6-BD94-45ED4381B7BC}] => (Allow) C:\Program Files\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{072BBDD1-E556-435F-ADD7-80568381DBB2}] => (Allow) C:\Program Files\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{2AD24258-3E72-4926-BAC9-7B4D91BDD12C}] => (Allow) C:\Program Files\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{49F4F9C5-A972-4118-8519-41FF3D9D0736}] => (Allow) C:\Program Files\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{11297D12-45B4-4370-964C-F2A8B322C06C}] => (Allow) C:\Program Files\AVG\AVG2015\avgemcx.exe
FirewallRules: [{BFCE29E3-F43B-49AF-9D4B-22574A70D7A2}] => (Allow) C:\Program Files\AVG\AVG2015\avgemcx.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/31/2015 07:29:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/31/2015 01:39:47 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".
Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/31/2015 01:39:33 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (05/31/2015 00:59:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/30/2015 06:35:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/30/2015 01:35:02 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
Generatordaten werden gesammelt

Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {dec5a34b-1a31-4147-9740-003c54f53e39}

Error: (05/30/2015 01:18:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/29/2015 07:50:15 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".
Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/29/2015 07:49:55 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (05/29/2015 03:55:20 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.


System errors:
=============
Error: (05/31/2015 07:30:17 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (05/31/2015 07:30:10 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (05/31/2015 07:30:03 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" ist vom Dienst "Peernetzwerkidentitäts-Manager" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1053

Error: (05/31/2015 07:30:03 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peernetzwerkidentitäts-Manager" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1053

Error: (05/31/2015 07:30:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Peernetzwerkidentitäts-Manager" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (05/31/2015 07:30:03 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Peernetzwerkidentitäts-Manager erreicht.

Error: (05/31/2015 07:29:54 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (05/31/2015 07:29:48 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (05/31/2015 07:29:32 PM) (Source: Microsoft-Windows-WHEA-Logger) (EventID: 18) (User: NT-AUTORITÄT)
Description: Schwerwiegender Hardwarefehler.

Gemeldet von Komponente: Prozessorkern
Fehlerquelle: 3
Fehlertyp: 10
Prozessor-ID: 1

Die Detailansicht dieses Eintrags beinhaltet weitere Informationen.

Error: (05/31/2015 07:29:32 PM) (Source: Microsoft-Windows-WHEA-Logger) (EventID: 18) (User: NT-AUTORITÄT)
Description: Schwerwiegender Hardwarefehler.

Gemeldet von Komponente: Prozessorkern
Fehlerquelle: 3
Fehlertyp: 256
Prozessor-ID: 1

Die Detailansicht dieses Eintrags beinhaltet weitere Informationen.


Microsoft Office:
=========================
Error: (05/31/2015 07:29:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/31/2015 01:39:47 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files\OpenOffice.org 3\Basis\program\python-core-2.6.1\lib\distutils\command\wininst-9.0-amd64.exe

Error: (05/31/2015 01:39:33 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: c:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dllc:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dll2

Error: (05/31/2015 00:59:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/30/2015 06:35:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/30/2015 01:35:02 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
Generatordaten werden gesammelt

Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {dec5a34b-1a31-4147-9740-003c54f53e39}

Error: (05/30/2015 01:18:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/29/2015 07:50:15 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files\OpenOffice.org 3\Basis\program\python-core-2.6.1\lib\distutils\command\wininst-9.0-amd64.exe

Error: (05/29/2015 07:49:55 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: c:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dllc:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dll2

Error: (05/29/2015 03:55:20 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: c:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dllc:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dll2


==================== Memory info ===========================

Processor: AMD Athlon(tm) 64 X2 Dual-Core Processor TK-42
Percentage of memory in use: 51%
Total physical RAM: 3070.11 MB
Available physical RAM: 1500.32 MB
Total Pagefile: 6138.53 MB
Available Pagefile: 4433.72 MB
Total Virtual: 2047.88 MB
Available Virtual: 1905.13 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:199.39 GB) (Free:139.26 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive f: (Volume) (Fixed) (Total:85.69 GB) (Free:8.4 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: E9D0494E)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=199.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=85.7 GB) - (Type=OF Extended)

==================== End of log ============================================== End of log ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 29-05-2015
Ran by HABIBI at 2015-05-31 19:58:37
Running from C:\Users\HABIBI\Downloads\Programs
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2368753947-3574136048-3515473578-500 - Administrator - Disabled)
Gast (S-1-5-21-2368753947-3574136048-3515473578-501 - Limited - Disabled)
HABIBI (S-1-5-21-2368753947-3574136048-3515473578-1000 - Administrator - Enabled) => C:\Users\HABIBI
HomeGroupUser$ (S-1-5-21-2368753947-3574136048-3515473578-1003 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG Internet Security 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
FW: AVG Internet Security 2015 (Enabled) {757AB44A-78C2-7D1A-E37F-CA42A037B368}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.)
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5941 - AVG Technologies)
AVG 2015 (Version: 15.0.4354 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.5941 - AVG Technologies) Hidden
AVG PC TuneUp 2015 (de-DE) (Version: 15.0.1001.403 - AVG Technologies) Hidden
AVG PC TuneUp 2015 (HKLM\...\AVG PC TuneUp) (Version: 15.0.1001.403 - AVG Technologies)
AVG PC TuneUp 2015 (Version: 15.0.1001.403 - AVG Technologies) Hidden
ccc-core-static (Version: 2010.0210.2339.42455 - Ihr Firmenname) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)
Cisco EAP-FAST Module (HKLM\...\{415B2719-AD3A-4944-B404-C472DB6085B3}) (Version: 2.1.6 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{83770D14-21B9-44B3-8689-F7B523F94560}) (Version: 1.0.12 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}) (Version: 1.0.13 - Cisco Systems, Inc.)
eMachines Games (HKLM\...\WildTangent emachines Master Uninstall) (Version: 1.0.0.52 - WildTangent)
eMachines Power Management (HKLM\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 4.00.3004 - eMachines)
eMachines Recovery Management (HKLM\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.00.3001 - Acer Incorporated)
eMachines ScreenSaver (HKLM\...\eMachines Screensaver) (Version: 1.0.1.0309 - eMachines)
Internet Download Manager (HKLM\...\Internet Download Manager) (Version: - Tonec Inc.)
InterVideo WinDVD 8 (HKLM\...\InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}) (Version: 8.0-B9.574 - InterVideo Inc.)
InterVideo WinDVD 8 (Version: 8.0-B9.574 - InterVideo Inc.) Hidden
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 38.0.1 (x86 de) (HKLM\...\Mozilla Firefox 38.0.1 (x86 de)) (Version: 38.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
OpenOffice.org 3.3 (HKLM\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Praetorians (HKLM\...\{AAC8AF92-DAEC-45D2-B77D-36699E3751A9}) (Version: - Pyro Studios)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.31 - Qualcomm Atheros)
Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.2.8400.30143 - Realtek Semiconductor Corp.)
Skins (Version: 2010.0210.2339.42455 - ATI) Hidden
Stronghold Crusader (HKLM\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version: - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 12.1.3.1 - Synaptics)
TightVNC 1.3.10 (HKLM\...\TightVNC_is1) (Version: 1.3.10 - TightVNC Group)
Ulead COOL 360 1.0 (HKLM\...\{3CEA4CA8-CDD4-451C-B673-E8F17BE01B15}) (Version: - )
Update Installer for WildTangent Games App (Version: - WildTangent) Hidden
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WildTangent Games App (eMachines Games) (HKLM\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-emachines) (Version: 4.0.5.37 - WildTangent)
Winamp (HKLM\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
Windows Live ID-Anmelde-Assistent (HKLM\...\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
WinRAR 5.10 Beta 4 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)
WinZip 16.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240CC}) (Version: 16.0.9715 - WinZip Computing, S.L. )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

12-05-2015 20:48:59 Windows Update
13-05-2015 22:14:48 Windows Update
14-05-2015 13:09:17 Windows-Sicherung
14-05-2015 13:44:51 Removed SDFormatter.
14-05-2015 13:46:42 Removed Visual Studio 2012 x86 Redistributables
14-05-2015 20:24:26 Windows-Sicherung
15-05-2015 08:15:45 Removed AVG 2015
19-05-2015 17:16:55 Windows-Sicherung
20-05-2015 18:36:03 Installiert Praetorians
20-05-2015 19:59:35 Windows Update
25-05-2015 10:46:50 Windows-Sicherung
30-05-2015 13:35:03 Uniblue PC Mechanic installation
31-05-2015 19:39:44 Windows-Sicherung

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {09382A03-9C92-402C-9DB0-CE1AEE0B7FEF} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {22844EAF-A051-44F3-92E4-97ED15A7A004} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-30] (Piriform Ltd)
Task: {2F75E6A9-D7AB-4E62-B025-9A3EB6466E3F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {4AA38D3E-93FB-4FFC-9BCF-89B994DC9C01} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {57E1D365-7AE6-4C6D-9CFE-2EF5BA425DCE} - System32\Tasks\{F3F083DA-5DDA-4C6D-803F-A1F3788BA372} => C:\Program Files\Internet Download Manager\IDMan.exe [2015-04-20] (Tonec Inc.)
Task: {5916F864-469C-4391-8604-E4EA141A2699} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {5B793A6F-49A8-483C-9B8C-82F2464731AE} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\AVG\AVG PC TuneUp\OneClick.exe [2015-02-25] (AVG Technologies)
Task: {732682C4-705A-413D-AC5F-D83E834554A9} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {9E2761F7-0D85-4866-9214-F6D6E9704483} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {ACDD310F-57C1-44F1-B3DF-C2EB93C99D99} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {C0507C45-2262-4CC1-AFE0-1EA458E1AB74} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {C71FCE0D-6D61-489C-B4E1-988EA6CB743D} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {DEB1DC8D-34EA-4A06-938C-179CD9B23AE8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-23] (Adobe Systems Incorporated)
Task: {F8F6D9D1-FA43-4D23-9A2F-0271F8A0D506} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (Whitelisted) ==============

2014-10-23 21:19 - 2014-10-23 21:19 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2014-04-14 21:41 - 2014-04-14 21:41 - 00039192 _____ () C:\Program Files\CCleaner\branding.dll
2015-02-25 09:25 - 2015-02-25 09:25 - 00604984 _____ () C:\Program Files\AVG\AVG PC TuneUp\avgreplibx.dll
2015-02-25 09:25 - 2015-02-25 09:25 - 00728888 _____ () C:\Program Files\AVG\AVG PC TuneUp\tulngx.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\57616772.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\65156158.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\57616772.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\65156158.sys => ""="Driver"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\00hq.com -> 00hq.com*-*Diese Website steht zum Verkauf!*-*Informationen zum Thema 00hq.
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\0scan.com -> 0scan.com*-*Diese Website steht zum Verkauf!*-*Informationen zum Thema 0scan.
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\1000gratisproben.com -> 1000gratisproben.com*-*Diese Website steht zum Verkauf!*-*Informationen zum Thema 1000gratisproben.
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\1001namen.com -> 404 Not Found
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\100sexlinks.com -> 100sexlinks.com*-*Diese Website steht zum Verkauf!*-*Informationen zum Thema Sex links.
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\10sek.com -> Gadgets And More
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\123moviedownload.com -> Watch Movies Online | uMovies Movie2k Online - 123Movies
IE restricted site: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\123simsen.com -> 123Simsen-Projekte

There are 7748 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\HABIBI\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: FlashPlayerUpdate => C:\Windows\system32\Macromed\Flash\FlashUtil32_16_0_0_305_Plugin.exe -update plugin

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{4AC42962-B882-4EC7-824B-779089E20A35}C:\program files\tightvnc\winvnc.exe] => (Block) C:\program files\tightvnc\winvnc.exe
FirewallRules: [TCP Query User{3C3133ED-0E6C-468E-9088-31BD48F9BB87}C:\program files\tightvnc\winvnc.exe] => (Block) C:\program files\tightvnc\winvnc.exe
FirewallRules: [UDP Query User{2A7A1930-490F-4F05-BAAD-C322463AE70A}C:\windows\system32\taskeng.exe] => (Block) C:\windows\system32\taskeng.exe
FirewallRules: [TCP Query User{E7F822D6-BDBC-455D-90A9-7828F4AC2C72}C:\windows\system32\taskeng.exe] => (Block) C:\windows\system32\taskeng.exe
FirewallRules: [UDP Query User{CB234158-DA69-4101-80F0-D53F8235DCBE}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [TCP Query User{AA206CF9-C1F0-41EE-AC4A-F999BD2A1AEB}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [UDP Query User{8B4A5A76-0989-4350-A1F3-D5A52D6964AA}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [TCP Query User{C5B08CD0-3CB2-4CCF-868A-7D392270D42E}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [UDP Query User{1C4100E8-8E39-4A72-879D-1817C0ECD1B1}C:\windows\system32\taskeng.exe] => (Block) C:\windows\system32\taskeng.exe
FirewallRules: [TCP Query User{9E006149-7592-4F1A-9E2C-2D69E0B1027D}C:\windows\system32\taskeng.exe] => (Block) C:\windows\system32\taskeng.exe
FirewallRules: [{2BC81A8F-FEC0-48B2-B7D0-49A8159E9A36}] => (Allow) LPort=26675
FirewallRules: [{82489DB8-138B-4D32-B7B1-02CB69662787}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [UDP Query User{AA7E2804-1FC0-41C0-A46F-B3C0A1EED149}C:\program files\internet explorer\iexplore.exe] => (Allow) C:\program files\internet explorer\iexplore.exe
FirewallRules: [TCP Query User{E0292C85-3F2A-417C-BDBB-77FBCECF0F4F}C:\program files\internet explorer\iexplore.exe] => (Allow) C:\program files\internet explorer\iexplore.exe
FirewallRules: [UDP Query User{74C2536E-C092-45B0-BFC8-DF74A8C1599B}C:\program files\tightvnc\winvnc.exe] => (Allow) C:\program files\tightvnc\winvnc.exe
FirewallRules: [TCP Query User{B91D8808-F2B3-4813-937D-BDC0210DA49B}C:\program files\tightvnc\winvnc.exe] => (Allow) C:\program files\tightvnc\winvnc.exe
FirewallRules: [{00910517-1F44-49C1-9BE9-1086875D90FE}] => (Allow) C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{F1FD9A2D-F43B-4A2D-AEAC-D701DAD93572}] => (Allow) C:\Program Files\Winamp\winamp.exe
FirewallRules: [{247258D3-3E34-4815-A4EB-FF9567A5D46E}] => (Allow) C:\Program Files\Winamp\winamp.exe
FirewallRules: [{5445E45E-31FA-4EF1-9209-19322CB9CE68}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{1BC520C0-F027-42E6-977F-9B44839BFD32}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{1B0F5DDF-5F68-4BC0-8DC4-749AFDAF8572}] => (Allow) C:\Program Files\AVG\AVG2015\avgnsx.exe
FirewallRules: [{0896AA92-7C7E-4F43-9BCC-76E3C184AC3C}] => (Allow) C:\Program Files\AVG\AVG2015\avgnsx.exe
FirewallRules: [{D58A2297-B6FF-4FF6-BD94-45ED4381B7BC}] => (Allow) C:\Program Files\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{072BBDD1-E556-435F-ADD7-80568381DBB2}] => (Allow) C:\Program Files\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{2AD24258-3E72-4926-BAC9-7B4D91BDD12C}] => (Allow) C:\Program Files\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{49F4F9C5-A972-4118-8519-41FF3D9D0736}] => (Allow) C:\Program Files\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{11297D12-45B4-4370-964C-F2A8B322C06C}] => (Allow) C:\Program Files\AVG\AVG2015\avgemcx.exe
FirewallRules: [{BFCE29E3-F43B-49AF-9D4B-22574A70D7A2}] => (Allow) C:\Program Files\AVG\AVG2015\avgemcx.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/31/2015 07:29:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/31/2015 01:39:47 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".
Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/31/2015 01:39:33 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (05/31/2015 00:59:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/30/2015 06:35:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/30/2015 01:35:02 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
Generatordaten werden gesammelt

Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {dec5a34b-1a31-4147-9740-003c54f53e39}

Error: (05/30/2015 01:18:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/29/2015 07:50:15 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".
Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/29/2015 07:49:55 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (05/29/2015 03:55:20 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.


System errors:
=============
Error: (05/31/2015 07:30:17 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (05/31/2015 07:30:10 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (05/31/2015 07:30:03 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" ist vom Dienst "Peernetzwerkidentitäts-Manager" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1053

Error: (05/31/2015 07:30:03 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peernetzwerkidentitäts-Manager" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1053

Error: (05/31/2015 07:30:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Peernetzwerkidentitäts-Manager" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (05/31/2015 07:30:03 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Peernetzwerkidentitäts-Manager erreicht.

Error: (05/31/2015 07:29:54 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (05/31/2015 07:29:48 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (05/31/2015 07:29:32 PM) (Source: Microsoft-Windows-WHEA-Logger) (EventID: 18) (User: NT-AUTORITÄT)
Description: Schwerwiegender Hardwarefehler.

Gemeldet von Komponente: Prozessorkern
Fehlerquelle: 3
Fehlertyp: 10
Prozessor-ID: 1

Die Detailansicht dieses Eintrags beinhaltet weitere Informationen.

Error: (05/31/2015 07:29:32 PM) (Source: Microsoft-Windows-WHEA-Logger) (EventID: 18) (User: NT-AUTORITÄT)
Description: Schwerwiegender Hardwarefehler.

Gemeldet von Komponente: Prozessorkern
Fehlerquelle: 3
Fehlertyp: 256
Prozessor-ID: 1

Die Detailansicht dieses Eintrags beinhaltet weitere Informationen.


Microsoft Office:
=========================
Error: (05/31/2015 07:29:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/31/2015 01:39:47 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files\OpenOffice.org 3\Basis\program\python-core-2.6.1\lib\distutils\command\wininst-9.0-amd64.exe

Error: (05/31/2015 01:39:33 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: c:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dllc:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dll2

Error: (05/31/2015 00:59:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/30/2015 06:35:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/30/2015 01:35:02 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
Generatordaten werden gesammelt

Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {dec5a34b-1a31-4147-9740-003c54f53e39}

Error: (05/30/2015 01:18:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/29/2015 07:50:15 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files\OpenOffice.org 3\Basis\program\python-core-2.6.1\lib\distutils\command\wininst-9.0-amd64.exe

Error: (05/29/2015 07:49:55 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: c:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dllc:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dll2

Error: (05/29/2015 03:55:20 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: c:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dllc:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dll2


==================== Memory info ===========================

Processor: AMD Athlon(tm) 64 X2 Dual-Core Processor TK-42
Percentage of memory in use: 51%
Total physical RAM: 3070.11 MB
Available physical RAM: 1500.32 MB
Total Pagefile: 6138.53 MB
Available Pagefile: 4433.72 MB
Total Virtual: 2047.88 MB
Available Virtual: 1905.13 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:199.39 GB) (Free:139.26 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive f: (Volume) (Fixed) (Total:85.69 GB) (Free:8.4 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: E9D0494E)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=199.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=85.7 GB) - (Type=OF Extended)

==================== End of log ============================Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-05-2015
Ran by HABIBI (administrator) on MAIAN on 31-05-2015 20:34:01
Running from C:\Users\HABIBI\Downloads\Programs
Loaded Profiles: HABIBI (Available Profiles: HABIBI)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcsrvx.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgui.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgidsagent.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgwdsvc.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgemcx.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(AVG Technologies) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(AVG Technologies) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3745232 2015-04-15] (AVG Technologies CZ, s.r.o.)
HKLM\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [4826904 2014-10-30] (Piriform Ltd)
HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3898960 2015-04-20] (Tonec Inc.)
HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\MountPoints2: {d9eb5174-6995-11e3-b436-00235aefe0b6} - E:\pushinst.exe
HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\eMachine.scr
IFEO\gameconsole-wt.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\windvd.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2014-04-21] (Tonec Inc.)
BootExecute: autocheck autochk * उ उउऀᄑ

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Google
HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\Software\Microsoft\Internet Explorer\Main,Start Page = Google
URLSearchHook: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000 - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACEW
SearchScopes: HKLM -> {8D7BCC95-4B3A-4597-B533-7B32EBE22488} URL = hxxp://www.searchcanvas.com/web?ot=3&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACEW
SearchScopes: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000 -> {8D7BCC95-4B3A-4597-B533-7B32EBE22488} URL =
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files\Internet Download Manager\IDMIECC.dll [2015-02-21] (Internet Download Manager, Tonec Inc.)
BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19] (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKU\S-1-5-21-2368753947-3574136048-3515473578-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab
DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} Microsoft Office Download - Microsoft Store Deutschland
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\HABIBI\AppData\Roaming\Mozilla\Firefox\Profiles\d5msgkdb.default-1411322583490
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-23] ()
FF Plugin: @java.com/DTPlugin,version=1.6.0_35 -> C:\Windows\system32\npdeployJava1.dll [2012-08-28] (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files\Microsoft\Office Live\npOLW.dll No File
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin: @real.com/nprphtml5videoshim;version=1.0.0.0 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2010-04-02] (RealNetworks, Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-04-05] ()
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2368753947-3574136048-3515473578-1000: ubisoft.com/uplaypc -> C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\HABIBI\AppData\Roaming\Mozilla\Firefox\Profiles\d5msgkdb.default-1411322583490\searchplugins\google-images.xml [2014-09-28]
FF SearchPlugin: C:\Users\HABIBI\AppData\Roaming\Mozilla\Firefox\Profiles\d5msgkdb.default-1411322583490\searchplugins\google-maps.xml [2014-09-28]
FF SearchPlugin: C:\Users\HABIBI\AppData\Roaming\Mozilla\Firefox\Profiles\d5msgkdb.default-1411322583490\searchplugins\HOW TO DECRYPT FILES.txt [2011-02-25]
FF Extension: Adblock Plus - C:\Users\HABIBI\AppData\Roaming\Mozilla\Firefox\Profiles\d5msgkdb.default-1411322583490\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-13]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-12-02]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010-04-02]
FF HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\HABIBI\AppData\Roaming\Mozilla\Firefox\Profiles\d5msgkdb.default-1411322583490\extensions\cliqz@cliqz.com
FF HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\HABIBI\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\HABIBI\AppData\Roaming\IDM\idmmzcc5 [2015-05-31]
FF HKU\S-1-5-21-2368753947-3574136048-3515473578-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\HABIBI\AppData\Roaming\IDM\idmmzcc5

Chrome:
=======
CHR Profile: C:\Users\HABIBI\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs) - C:\Users\HABIBI\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-27]
CHR Extension: (Google Drive) - C:\Users\HABIBI\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-27]
CHR Extension: (YouTube) - C:\Users\HABIBI\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-03-30]
CHR Extension: (IDM Integration Module) - C:\Users\HABIBI\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn [2014-04-27]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\HABIBI\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2012-03-30]
CHR Extension: (Google Wallet) - C:\Users\HABIBI\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-27]
CHR Extension: (Gmail) - C:\Users\HABIBI\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-27]
CHR HKLM\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2010-04-02]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2015-04-20]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgfws; C:\Program Files\AVG\AVG2015\avgfws.exe [1517480 2015-04-15] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3438032 2015-04-15] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [311792 2015-04-15] (AVG Technologies CZ, s.r.o.)
R2 ePowerSvc; C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe [653856 2009-02-06] (Acer Incorporated)
S4 IconMan_R; C:\Program Files\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [1828496 2012-09-07] (Realsil Microelectronics Inc.)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [2161976 2015-02-25] (AVG Technologies)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswKbd; C:\Windows\system32\Drivers\aswKbd.sys [24408 2012-03-07] (AVAST Software)
R3 athr; C:\Windows\System32\DRIVERS\athr.sys [3078656 2012-11-08] (Qualcomm Atheros Communications, Inc.)
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [132576 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6x.sys [57824 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [226784 2015-04-09] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [166880 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [29664 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [206816 2015-04-15] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [269792 2015-03-11] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [110048 2015-04-03] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [35808 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [213984 2015-04-07] (AVG Technologies CZ, s.r.o.)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2007-01-26] (AVM Berlin) [File not signed]
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-03-31] () [File not signed]
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [265088 2007-01-26] (AVM GmbH)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x86.sys [99992 2012-07-19] (Qualcomm Atheros Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2015-05-31] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [15688 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [10320 2013-09-30] ()
R3 TuneUpUtilitiesDrv; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [12320 2015-01-13] (TuneUp Software)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-31 20:24 - 2015-05-31 20:21 - 00001313 _____ () C:\Users\HABIBI\Documents\Addition - Verknüpfung.lnk
2015-05-31 20:16 - 2015-05-31 20:01 - 00045135 _____ () C:\Users\HABIBI\Documents\FRST.txt
2015-05-31 20:06 - 2015-05-31 20:06 - 00119200 _____ () C:\Users\HABIBI\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-31 19:31 - 2015-05-31 19:33 - 00007079 _____ () C:\Windows\WindowsUpdate.log
2015-05-27 21:59 - 2015-05-27 21:59 - 00000017 _____ () C:\Users\HABIBI\AppData\Local\resmon.resmoncfg
2015-05-20 18:42 - 2015-05-20 18:42 - 00000000 ____D () C:\Users\HABIBI\Documents\Praetorians
2015-05-20 18:38 - 2015-05-20 18:38 - 00001120 _____ () C:\Users\Public\Desktop\Praetorians.lnk
2015-05-20 18:38 - 2015-05-20 18:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eidos Interactive
2015-05-20 18:36 - 2015-05-20 18:36 - 00000000 ____D () C:\Program Files\Eidos Interactive
2015-05-19 19:37 - 2015-05-27 21:34 - 00000000 ____D () C:\Program Files\Internet Download Manager
2015-05-19 19:37 - 2015-05-19 19:37 - 00001001 _____ () C:\Users\HABIBI\Desktop\Internet Download Manager.lnk
2015-05-19 19:37 - 2015-05-19 19:37 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2015-05-19 19:37 - 2015-05-19 19:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2015-05-19 18:34 - 2015-05-31 19:54 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\IDM
2015-05-14 13:31 - 2015-05-31 19:30 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-14 13:30 - 2015-05-14 13:30 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-05-14 13:30 - 2015-05-14 13:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-05-14 13:30 - 2015-05-14 13:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-14 13:30 - 2015-05-14 13:30 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2015-05-14 13:30 - 2015-04-14 09:37 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-05-14 13:30 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-05-14 13:30 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-05-14 13:01 - 2015-01-14 11:27 - 02894848 _____ () C:\Windows\system32\pwNative.exe
2015-05-14 13:01 - 2013-09-30 16:26 - 00015688 ____N () C:\Windows\system32\pwdrvio.sys
2015-05-14 13:00 - 2015-05-14 13:43 - 00000000 ____D () C:\Program Files\MiniTool Partition Wizard Free 9.0
2015-05-14 13:00 - 2013-09-30 16:26 - 00010320 ____N () C:\Windows\system32\pwdspio.sys
2015-05-14 11:24 - 2015-05-14 11:24 - 00000000 ____D () C:\Neuer Ordner
2015-05-12 22:17 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-12 19:49 - 2015-04-27 21:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-05-12 19:49 - 2015-04-27 21:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-12 19:49 - 2015-04-27 21:11 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-12 19:49 - 2015-04-27 21:11 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-12 19:49 - 2015-04-27 21:08 - 01307648 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00851456 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-12 19:49 - 2015-04-27 21:05 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-12 19:49 - 2015-04-27 21:04 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-12 19:49 - 2015-04-27 21:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-05-12 19:49 - 2015-04-27 21:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-12 19:49 - 2015-04-27 21:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-05-12 19:49 - 2015-04-27 21:04 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-05-12 19:49 - 2015-04-27 21:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-05-12 19:49 - 2015-04-27 21:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-05-12 19:49 - 2015-04-27 21:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-05-12 19:49 - 2015-04-27 21:04 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-05-12 19:49 - 2015-04-27 21:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-05-12 19:49 - 2015-04-27 21:04 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-12 19:49 - 2015-04-27 21:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-12 19:49 - 2015-04-27 21:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-12 19:49 - 2015-04-27 21:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-05-12 19:49 - 2015-04-27 21:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-12 19:49 - 2015-04-27 21:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-12 19:49 - 2015-04-27 20:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-12 19:49 - 2015-04-27 20:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-05-12 19:49 - 2015-04-27 20:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-12 19:49 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-12 19:49 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-12 19:49 - 2015-04-21 18:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-12 19:49 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-12 19:49 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-12 19:49 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-12 19:49 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-12 19:49 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-12 19:49 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-12 19:49 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-12 19:49 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-12 19:49 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-12 19:49 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-12 19:49 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-12 19:49 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-12 19:49 - 2015-04-21 17:58 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-12 19:49 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-12 19:49 - 2015-04-21 17:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-12 19:49 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-12 19:49 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-12 19:49 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-12 19:49 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-12 19:49 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-12 19:49 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-12 19:49 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-12 19:49 - 2015-04-21 17:26 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-12 19:49 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-12 19:49 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-12 19:49 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-12 19:49 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-12 19:49 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-12 19:49 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-12 19:49 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-12 19:48 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-12 19:48 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-12 19:48 - 2015-04-20 04:56 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-12 19:48 - 2015-04-20 04:03 - 02382336 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-12 19:48 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-12 19:48 - 2015-04-13 05:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-12 19:44 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-12 19:44 - 2015-04-08 05:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-12 19:44 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-05-12 19:44 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-12 19:44 - 2015-03-04 06:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-12 19:44 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-12 19:44 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-10 15:26 - 2015-05-10 15:26 - 00000000 ____D () C:\ProgramData\Baidu
2015-05-10 15:26 - 2015-05-10 15:26 - 00000000 ____D () C:\FFOutput
2015-05-10 14:51 - 2015-05-10 14:51 - 00000000 _____ () C:\vcredist.bmp
2015-05-03 21:14 - 1998-06-18 00:00 - 00089360 _____ (Microsoft Corporation) C:\Windows\system32\VB5DB.DLL
2015-05-03 18:09 - 2015-05-31 13:04 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\IrfanView
2015-05-01 13:49 - 2015-05-13 20:01 - 00002471 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-05-01 13:29 - 2015-05-01 13:29 - 00000000 ____D () C:\Program Files\MSECache
2015-05-01 11:33 - 2015-05-01 11:33 - 00000000 ____D () C:\Users\HABIBI\Documents\Fax
2015-05-01 11:29 - 2015-05-02 17:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015
2015-05-01 11:29 - 2015-05-01 11:29 - 00002181 _____ () C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2015-05-01 11:29 - 2015-05-01 11:29 - 00002171 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk
2015-05-01 11:29 - 2015-05-01 11:29 - 00002159 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2015.lnk
2015-05-01 11:29 - 2015-02-25 09:25 - 00037176 _____ (AVG Technologies) C:\Windows\system32\TURegOpt.exe
2015-05-01 11:29 - 2015-02-25 09:24 - 00025912 _____ (AVG Technologies) C:\Windows\system32\authuitu.dll
2015-05-01 10:17 - 2015-05-02 17:53 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Steganos VPN
2015-05-01 10:17 - 2015-05-01 10:26 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Steganos
2015-05-01 10:17 - 2015-05-01 10:26 - 00000000 ____D () C:\Program Files\Common Files\Steganos
2015-05-01 03:31 - 2015-05-02 17:54 - 00000000 ____D () C:\Program Files\MictorFents
2015-05-01 01:57 - 2015-05-01 01:57 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Opera Software
2015-05-01 01:57 - 2015-05-01 01:57 - 00000000 ____D () C:\Users\HABIBI\AppData\Local\Opera Software
2015-05-01 00:57 - 2015-05-01 00:57 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-31 20:34 - 2014-09-21 13:33 - 00000000 ____D () C:\FRST
2015-05-31 20:30 - 2014-02-13 21:02 - 00000000 ____D () C:\ProgramData\MFAData
2015-05-31 19:37 - 2012-05-04 22:08 - 00010512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-31 19:37 - 2012-05-04 22:08 - 00010512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-31 19:28 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-31 15:32 - 2012-08-28 21:56 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\DMCache
2015-05-27 21:54 - 2015-03-05 20:08 - 00000000 ____D () C:\Windows\tracing
2015-05-27 21:51 - 2013-07-18 20:36 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\vlc
2015-05-27 21:47 - 2011-02-28 20:05 - 00000000 ____D () C:\Program Files\Verbindungsassistent
2015-05-27 21:41 - 2009-12-18 16:06 - 00000000 ____D () C:\Program Files\Microsoft CAPICOM 2.1.0.2
2015-05-27 21:27 - 2009-12-30 14:13 - 00000000 ____D () C:\Program Files\Adobe
2015-05-23 18:36 - 2012-06-09 17:29 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-23 12:33 - 2014-06-22 21:06 - 00000000 ____D () C:\Users\HABIBI\AppData\Local\Adobe
2015-05-23 12:33 - 2012-06-09 17:29 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-05-23 12:33 - 2012-03-18 17:22 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-05-20 20:00 - 2015-04-04 12:19 - 00000000 ___SD () C:\Windows\system32\GWX
2015-05-20 19:50 - 2012-08-28 21:56 - 00000000 ____D () C:\Users\HABIBI\Downloads\Compressed
2015-05-20 18:42 - 2013-02-15 20:50 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-05-20 18:40 - 2009-03-03 15:40 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-05-17 08:40 - 2010-06-09 22:15 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-05-15 08:40 - 2015-03-16 20:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-05-15 08:26 - 2015-03-16 20:58 - 00000953 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2015-05-15 08:23 - 2014-11-19 16:22 - 00000000 ____D () C:\Users\HABIBI\AppData\Local\Avg
2015-05-14 19:43 - 2012-05-04 22:10 - 00000000 ____D () C:\Users\HABIBI
2015-05-14 19:37 - 2012-05-04 23:32 - 01647544 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-14 14:14 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-05-13 22:15 - 2009-07-14 10:56 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-13 19:42 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-05-13 19:42 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-13 19:40 - 2009-11-30 22:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-05-12 22:16 - 2013-08-20 11:27 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-12 22:06 - 2012-05-05 12:01 - 137310008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-12 22:01 - 2010-06-04 11:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-09 17:11 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2015-05-07 17:26 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2015-05-04 21:24 - 2014-09-22 17:52 - 00000000 ____D () C:\AdwCleaner
2015-05-03 12:26 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-05-03 12:26 - 2009-03-03 15:45 - 00000000 ____D () C:\Program Files\Microsoft.NET
2015-05-03 12:26 - 2009-03-03 15:44 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-05-03 12:24 - 2009-07-14 10:57 - 00000000 ____D () C:\Windows\ShellNew
2015-05-03 12:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\System
2015-05-03 12:21 - 2006-11-02 12:23 - 00000401 _____ () C:\Windows\win.ini
2015-05-03 12:18 - 2015-04-30 23:02 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-05-03 11:00 - 2009-12-04 22:24 - 00000000 ____D () C:\Program Files\AVG
2015-05-02 18:11 - 2010-01-02 00:33 - 00000000 ____D () C:\Program Files\DivX
2015-05-02 17:53 - 2009-07-14 10:56 - 00000000 ___RD () C:\Users\Public\Recorded TV
2015-05-02 17:53 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat
2015-05-01 23:04 - 2009-03-03 16:11 - 00000000 ____D () C:\Program Files\eMachines Games
2015-05-01 22:40 - 2009-03-03 15:13 - 00000000 ____D () C:\Program Files\MSXML 4.0
2015-05-01 21:48 - 2009-12-04 23:06 - 00000000 ____D () C:\Program Files\OpenOffice.org 3
2015-05-01 21:39 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\DVD Maker
2015-05-01 20:15 - 2009-03-03 16:07 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2015-05-01 20:13 - 2010-06-06 21:16 - 00000000 ____D () C:\Program Files\Common Files\PX Storage Engine
2015-05-01 20:13 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\Services
2015-05-01 20:08 - 2014-11-22 22:16 - 00000000 ____D () C:\Program Files\CCleaner
2015-05-01 20:08 - 2013-12-20 18:57 - 00000000 ____D () C:\Program Files\avmwlanstick
2015-05-01 19:47 - 2009-07-19 03:37 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-05-01 19:46 - 2012-04-07 16:41 - 00000000 ____D () C:\Program Files\Atheros
2015-05-01 19:25 - 2009-03-03 16:22 - 00000000 ____D () C:\book
2015-05-01 19:19 - 2009-03-03 15:46 - 00000000 ____D () C:\Program Files\Microsoft Works
2015-05-01 18:31 - 2013-12-29 23:24 - 00000000 ____D () C:\Program Files\Winamp
2015-05-01 18:30 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\Windows Defender
2015-05-01 18:29 - 2010-04-30 23:13 - 00000000 ____D () C:\Program Files\Windows Live Safety Center
2015-05-01 18:27 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2015-05-01 18:27 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2015-05-01 18:06 - 2009-12-21 20:54 - 00000000 ____D () C:\Program Files\WinRAR
2015-05-01 18:06 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\Windows Sidebar
2015-05-01 18:01 - 2012-05-03 21:30 - 00000000 ____D () C:\Program Files\WinZip
2015-05-01 16:36 - 2009-07-14 04:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-01 16:34 - 2012-05-15 11:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-05-01 16:34 - 2012-05-04 22:10 - 00000000 ___RD () C:\Users\HABIBI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-05-01 16:34 - 2012-05-04 22:10 - 00000000 ___RD () C:\Users\HABIBI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-01 16:34 - 2009-07-14 04:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-05-01 16:32 - 2012-05-01 20:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
2015-05-01 16:32 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-05-01 16:29 - 2014-11-22 21:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-05-01 16:28 - 2013-12-20 18:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN
2015-05-01 16:28 - 2009-03-03 16:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eMachines Games
2015-05-01 16:27 - 2012-05-03 21:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2015-05-01 16:27 - 2012-04-11 11:34 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3
2015-05-01 16:27 - 2009-07-19 03:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InterVideo WinDVD
2015-05-01 16:26 - 2012-05-15 11:20 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-05-01 16:26 - 2010-02-13 23:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TightVNC
2015-05-01 13:52 - 2009-11-30 13:34 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Adobe
2015-05-01 13:41 - 2012-08-28 21:56 - 00000000 ___RD () C:\Users\HABIBI\Downloads\Video
2015-05-01 11:29 - 2009-07-19 03:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eMachines
2015-05-01 10:57 - 2014-05-10 10:26 - 00000000 ____D () C:\Users\HABIBI\Documents\Neuer Ordner
2015-05-01 10:26 - 2014-04-27 19:26 - 00000000 __SHD () C:\Users\HABIBI\AppData\Local\EmieUserList
2015-05-01 10:20 - 2015-03-16 20:57 - 00000000 ____D () C:\ProgramData\AVG2015
2015-05-01 04:05 - 2013-12-29 23:24 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Winamp
2015-05-01 04:05 - 2013-02-15 20:25 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Origin
2015-05-01 04:05 - 2011-12-06 21:22 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Tunngle
2015-05-01 04:05 - 2011-06-05 00:47 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Template
2015-05-01 04:05 - 2010-09-09 22:28 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\ProtectDisc
2015-05-01 04:05 - 2010-07-10 21:00 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\skypePM
2015-05-01 04:05 - 2010-07-10 20:52 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Skype
2015-05-01 04:05 - 2010-03-06 00:58 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\TeamViewer
2015-05-01 04:05 - 2009-12-21 20:56 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\WinRAR
2015-05-01 04:04 - 2014-04-25 20:21 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\DiskDefrag
2015-05-01 04:04 - 2013-12-29 23:16 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\foobar2000
2015-05-01 04:04 - 2012-05-03 21:31 - 00000000 ____D () C:\Users\HABIBI\AppData\Local\WinZip
2015-05-01 04:04 - 2012-05-03 21:30 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Azureus
2015-05-01 04:04 - 2010-12-19 11:34 - 00000000 ____D () C:\Users\HABIBI\AppData\Local\PokerStars
2015-05-01 04:04 - 2010-12-13 20:35 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\Boomzap
2015-05-01 04:04 - 2010-09-03 22:48 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\ICQ
2015-05-01 04:04 - 2010-07-23 17:26 - 00000000 ____D () C:\Users\HABIBI\AppData\Roaming\dvdcss
2015-05-01 04:03 - 2015-01-02 12:08 - 00000000 __SHD () C:\Users\HABIBI\AppData\Local\EmieBrowserModeList
2015-05-01 04:03 - 2014-04-27 19:26 - 00000000 __SHD () C:\Users\HABIBI\AppData\Local\EmieSiteList
2015-05-01 04:03 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2015-05-01 04:03 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-05-01 04:03 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-01 04:03 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-05-01 04:03 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-01 04:02 - 2012-05-03 21:30 - 00000000 ____D () C:\ProgramData\WinZip
2015-05-01 04:02 - 2012-04-21 17:27 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-05-01 04:02 - 2010-09-17 19:18 - 00000000 ____D () C:\ProgramData\UDL
2015-05-01 04:02 - 2009-03-03 16:11 - 00000000 ____D () C:\ProgramData\WildTangent
2015-05-01 04:00 - 2014-12-05 19:45 - 00000000 ____D () C:\ProgramData\formatpart
2015-05-01 04:00 - 2014-12-05 19:42 - 00000000 ____D () C:\ProgramData\deletepart
2015-05-01 04:00 - 2014-12-05 19:40 - 00000000 ____D () C:\ProgramData\createonepart
2015-05-01 04:00 - 2014-12-05 19:38 - 00000000 ____D () C:\ProgramData\redistpart
2015-05-01 04:00 - 2014-12-05 19:38 - 00000000 ____D () C:\ProgramData\launcher
2015-05-01 04:00 - 2014-12-05 19:38 - 00000000 ____D () C:\ProgramData\explauncher
2015-05-01 04:00 - 2014-02-16 22:05 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2015-05-01 04:00 - 2013-04-08 22:28 - 00000000 ____D () C:\ProgramData\Qualcomm Atheros
2015-05-01 04:00 - 2012-04-07 16:41 - 00000000 ____D () C:\ProgramData\Atheros
2015-05-01 04:00 - 2011-02-15 22:40 - 00000000 ____D () C:\ProgramData\Novatel Wireless
2015-05-01 04:00 - 2010-02-12 17:15 - 00000000 ____D () C:\ProgramData\PopCap Games
2015-05-01 04:00 - 2009-03-03 16:08 - 00000000 ____D () C:\ProgramData\Norton
2015-05-01 03:59 - 2010-02-13 23:51 - 00000000 ____D () C:\Program Files\TightVNC
2015-05-01 03:44 - 2009-03-03 22:43 - 00000000 ___HD () C:\ACER
2015-05-01 01:02 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\MSBuild

==================== Files in the root of some directories =======

2012-05-14 19:53 - 2013-07-18 19:36 - 0000000 _____ () C:\Users\HABIBI\AppData\Roaming\AVSDVDPlayer.m3u
2012-05-05 00:13 - 2011-02-25 07:30 - 0000435 _____ () C:\Users\HABIBI\AppData\Roaming\HOW TO DECRYPT FILES.txt
2013-02-14 20:41 - 2013-02-14 20:41 - 0022328 _____ () C:\Users\HABIBI\AppData\Roaming\PnkBstrK.sys
2009-11-30 14:03 - 2011-10-18 21:11 - 0001206 _____ () C:\Users\HABIBI\AppData\Roaming\wklnhst.dat
2012-05-05 00:13 - 2011-02-25 07:30 - 0000435 _____ () C:\Users\HABIBI\AppData\Local\HOW TO DECRYPT FILES.txt
2015-05-27 21:59 - 2015-05-27 21:59 - 0000017 _____ () C:\Users\HABIBI\AppData\Local\resmon.resmoncfg

Some files in TEMP:
====================
C:\Users\HABIBI\AppData\Local\Temp\iv_uninstall.exe
C:\Users\ordner\AppData\Local\Temp\RtkBtMnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-29 19:49

==================== End of log ============================

Meine Frage bezgl der Dateiendungen?

Was meinen Sie mit Daieiendungen?Wo kann ich sie nachschauen?
Gruß

Früher hieß ne PDF zB "Unterlagen.pdf", jetzt, da sie verschlüsselt ist, kann es sein dass sich die Erweiterung PDF geändert hat in .PDF.encrypted, oder .EXX, oder sonstwas.